Most teams think their APIs are secure.

If you do any serious bug bounty hunting or penetration testing, you already know the pain. You end up clicking through the exact same…

Welcome to a new Medium post. In this article, we’ll explore how to determine the status of Windows Code Integrity protection directly from…

In the fast-paced world of decentralized finance (DeFi) and Web3, a project’s domain and DNS infrastructure are often its most valuable and…

Hack the World with OSINT DefCon ICS Village Presentation

In late 2019, attackers silently infiltrated SolarWinds’ software build system, planting a backdoor into routine updates that went…

Firstly, we started off with a nmap scan of the target:

No degree, no fancy bootcamp. Just curiosity, late nights, and a lot of trial and error.

https://thehackernews.com/2026/04/adobe-reader-zero-day-exploited-via.html

This week’s biggest breaches came through the front door, using credentials your organization already trusted.

Why what you see isn’t always what is happening in your SOC.

The HTB Certified Penetration Testing Specialist (CPTS) is one of the most realistic penetration testing certifications available today.

UnIndexed challenge walkthrough exploring prompts and hidden information in AI

I was sitting in my lab, running two virtual machines — Kali Linux and Ubuntu.

Digital Annotations replace paper markups in business, enabling real time collaboration, version control, and secure document workflows across teams

In this write up, we explore a slightly different approach of obfuscation aside from the tried-and-true — XOR.

In the last article, we talked about Kerckhoffs' Principle (Algorithms are known entities; the only thing unknown is the key). We know that…

Breaking down CVE-2026–34197: a remote code execution vulnerability in Apache ActiveMQ Classic that hid in the Jolokia API for over a…

By Joshua Moses

Why I Did This Lab